Description

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure.

Related CPE's

a

adobe

commerce

6

a

adobe

magento_open_source

6

References

https://helpx.adobe.com/security/products/magento/apsb23-17.html

Release NotesVendor Advisory

Weaknesses

[email protected]

Primary
CWE-863

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.3 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2023-03-27T21:15:10.923

1 year ago

Last modified

2023-04-04T19:56:42.110

1 year ago